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Abstract 


This document describes methods for encapsulating the Protocol Data 
Units (PDUs) of layer 2 protocols such as Frame Relay, Asynchronous 
Transfer Mode (ATM), or Ethernet for transport across an MPLS 
network. This document describes the so-called "draft-martini" 
protocol, which has since been superseded by the Pseudowire Emulation 
Edge to Edge Working Group specifications described in RFC 4447 and 
related documents. 
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Ls 


Introduction 


In an MPLS network, it is possible to use control protocols such as 
those specified in [RFC4906] to set up "emulated virtual circuits" 
that carry the Protocol Data Units of layer 2 protocols across the 
network. A number of these emulated virtual circuits (VCs) may be 
carried in a single tunnel. This requires, of course, that the layer 
2 PDUs be encapsulated. We can distinguish three layers of this 
encapsulation: 


- the "tunnel header", which contains the information needed to 
transport the PDU across the MPLS network; this header belongs 
to the tunneling protocol, e.g., MPLS, Generic Routing 
Encapsulation (GRE), and Layer 2 Tunneling Protocol (L2TP). 


- the "demultiplexer field", which is used to distinguish 
individual emulated virtual circuits within a single tunnel; 
this field must be understood by the tunneling protocol as well; 
it may be, e.g., an MPLS label or a GRE key field. 


- the "emulated VC encapsulation", which contains the information 
about the enclosed layer 2 PDU that is necessary in order to 
properly emulate the corresponding layer 2 protocol. 


This document specifies the emulated VC encapsulation for a number of 
layer 2 protocols. Although different layer 2 protocols require 
different information to be carried in this encapsulation, an attempt 
has been made to make the encapsulation as common as possible for all 
layer 2 protocols. 


This document also specifies the way in which the demultiplexer field 
is added to the emulated VC encapsulation when an MPLS label is used 
as the demultiplexer field. 


Quality of service (Q0S)-related issues are not discussed in this 
document. 


For the purpose of this document, RI will be defined as the ingress 
router, and R2 as the egress router. A layer 2 PDU will be received 
at R1, encapsulated at R1, transported, decapsulated at R2, and 
transmitted out of R2. 


Specification of Requirements 
The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", 


"SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this 
document are to be interpreted as described in [RFC2119]. 
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4. 


Special Note 


This document describes the so called "draft-martini" protocol, which 
is used in many deployed implementations. This document and its 
contents have since been superseded by the Pseudowire Emulation Edge 
to Edge Working Group specifications: [RFC4447], [RFC4385], 

[RFC4448], [RFC4717], [RFC4618], [RFC4619], [RFC4553], [RFC4842], and 
related documents. This document serves as documentation of current 
implementations, and MUST NOT be used for new implementations. The 
PWE3 Label Distribution Protocol control protocol document [RFC4447], 
which is backward compatible with this document, MUST be used for all 
new implementations of this protocol. 


General Encapsulation Method 


In most cases, it is not necessary to transport the layer 2 
encapsulation across the network; rather, the layer 2 header can be 
stripped at R1 and reproduced at R2. This is done using information 
carried in the control word (see below), as well as information that 
may already have been signaled from R1 to R2. 


1. The Control Word 


There are three requirements that may need to be satisfied when 
transporting layer 2 protocols over an MPLS backbone: 


-i. Sequentiality may need to be preserved. 


-ii. Small packets may need to be padded in order to be transmitted 
on a medium where the minimum transport unit is larger than the 
actual packet size. 


-iii. Control bits carried in the header of the layer 2 frame may 
need to be transported. 


The control word defined here addresses all three of these 
requirements. For some protocols, this word is REQUIRED, and for 
others OPTIONAL. For protocols where the control word is OPTIONAL, 
implementations MUST support sending no control word, and MAY support 
sending a control word. 


In all cases, the egress router must be aware of whether the ingress 
router will send a control word over a specific virtual circuit. 

This may be achieved by configuration of the routers or by signaling, 
for example, as defined in [RFC4906]. 
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The control word is defined as follows: 


0 1 2 3 
01234567890123456789012345678901 
dh hh RO q de de dd de de dd dd q MB MA 4 4 4 + + + +++ ++ +++ 

| Rsvd | Flags |0 0| Length | Sequence Number 
+ hhh A hv 4 4 4 4 4 + + + +++ ++ +++ 


In the above diagram, the first 4 bits are reserved for future use. 
They MUST be set to 0 when transmitting, and MUST be ignored upon 
receipt. 


The next 4 bits provide space for carrying protocol-specific flags. 
These are defined in the protocol-specific details below. 


The next 2 bits MUST be set to 0 when transmitting. 


The next 6 bits provide a length field, which is used as follows: If 
the packet’s length (defined as the length of the layer 2 payload 
plus the length of the control word) is less than 64 bytes, the 
length field MUST be set to the packet’s length. Otherwise, the 
length field MUST be set to 0. The value of the length field, if 
non-zero, can be used to remove any padding. When the packet reaches 
the service provider's egress router, it may be desirable to remove 
the padding before forwarding the packet. 


The next 16 bits provide a sequence number that can be used to 
guarantee ordered packet delivery. The processing of the sequence 
number field is OPTIONAL. 


The sequence number space is a 16-bit, unsigned circular space. The 
sequence number value 0 is used to indicate an unsequenced packet. 


4.1.1. Setting the Sequence Number 
For a given emulated VC, and a pair of routers R1 and R2, if R1 
supports packet sequencing, then the following procedures should be 


used: 


- The initial packet transmitted on the emulated VC MUST use 
sequence number 1. 


- Subsequent packets MUST increment the sequence number by 1 for 
each packet. 


- When the transmit sequence number reaches the maximum 16 bit 
value (65535), the sequence number MUST wrap to 1. 
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If the transmitting router R1 does not support sequence number 
processing, then the sequence number field in the control word MUST 
be set to 0. 


4.1.2. Processing the Sequence Number 


If a router R2 supports receive sequence number processing, then the 
following procedures should be used: 


When an emulated VC is initially set up, the "expected sequence 
number" associated with it MUST be initialized to 1. 


When a packet is received on that emulated VC, the sequence number 
should be processed as follows: 


- If the sequence number on the packet is 0, then the packet 
passes the sequence number check. 


- Else if the packet sequence number >= the expected sequence 
number and the packet sequence number - the expected sequence 
number < 32768, then the packet is in order. 


- Else if the packet sequence number < the expected sequence 
number and the expected sequence number - the packet sequence 
number >= 32768, then the packet is in order. 


- Otherwise, the packet is out of order. 


If a packet passes the sequence number check or is in order, then it 
can be delivered immediately. If the packet is in order, then the 
expected sequence number should be set using the algorithm: 


expected_sequence_number := packet_sequence_number + 1 mod 2**16 
if (expected_sequence_number = 0) then expected_sequence_number := 1; 


Packets that are received out of order MAY be dropped or reordered at 
the discretion of the receiver. 


If a router R2 does not support receive sequence number processing, 
then the sequence number field MAY be ignored. 


4.2. MTU Requirements 


The network MUST be configured with an MTU that is sufficient to 
transport the largest encapsulation frames. If MPLS is used as the 
tunneling protocol, for example, this is likely to be 12 or more 
bytes greater than the largest frame size. Other tunneling protocols 
may have longer headers and require larger MTUs. If the ingress 
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5. 


5. 


router determines that an encapsulated layer 2 PDU exceeds the MTU of 
the tunnel through which it must be sent, the PDU MUST be dropped. 

If an egress router receives an encapsulated layer 2 PDU whose 
payload length (i.e., the length of the PDU itself without any of the 
encapsulation headers) exceeds the MTU of the destination layer 2 
interface, the PDU MUST be dropped. 


Protocol-Specific Details 
1. Frame Relay 


A Frame Relay PDU is transported without the Frame Relay header or 
the Frame Check Sequence (FCS). The control word is REQUIRED; 
however, its use is optional, although desirable. Use of the control 
word means that the ingress and egress Label Switching Routers (LSRs) 
follow the procedures below. If an ingress LSR chooses not to use 
the control word, it MUST set the flags in the control word to 0; if 
an egress LSR chooses to ignore the control word, it MUST set the 
Frame Relay control bits to 0. 


The BECN (Backward Explicit Congestion Notification), FECN (Forward 
Explicit Congestion Notification), DE (Discard Eligibility), and C/R 
(Command/Response) bits are carried across the network in the control 
word. The edge routers that implement this document MAY, when either 
adding or removing the encapsulation described herein, change the 
BECN and/or FECN bits from 0 to 1 in order to reflect congestion in 
the network that is known to the edge routers, and the D/E bit from 0 
to 1 to reflect marking from edge policing of the Frame Relay 
Committed Information Rate. The BECN, FECN, and D/E bits SHOULD NOT 
be changed from 1 to 0. 


The following is an example of a Frame Relay packet: 


0 1 2 3 
OL 2-34 506 T 8:90: 234506 7:8. 9.0 52-3 4 56 7.8»90 1 


A —— € — o + 
| Rsvd |B|r|D|c|] Length | Sequence Number 
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 


Frame Relay PDU | 


" | 


+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 
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* B ( BECN ) Bit 


The ingress router, R1, SHOULD copy the BECN field from the 
incoming Frame Relay header into this field. The egress router, 
R2, MUST generate a new BECN field based on the value of the B 
pit. 


* F ( FECN ) Bit 


The ingress router, R1, SHOULD copy the FECN field from the 
incoming Frame Relay header into this field. The egress router, 
R2, MUST generate a new FECN field based on the value of the F 
bat. 


* D ( DE ) Bit 


The ingress router, R1, SHOULD copy the DE field from the 
incoming Frame Relay header into this field. The egress router, 
R2, MUST generate a new DE field based on the value of the D 
bit. 


If the tunneling protocol provides a field that can be set to 
Specify a Quality of Service, the ingress router, R1, MAY 
consider the DE bit of the Frame Relay header when determining 
the value of that field. The egress router MAY then consider 
the value of this field when queuing the layer 2 PDU for egress. 
Note however that frames from the same VC MUST NOT be reordered. 


* C ( C/R ) Bit 


The ingress router, R1, SHOULD copy the C/R bit from the 
received Frame Relay PDU to the C bit of the control word. The 
egress router, R2, MUST copy the C bit into the output frame. 


5.2. ATM 


Two encapsulations are supported for ATM transport: one for ATM 
Adaption Layer 5 (AAL5) and another for ATM cells. 


The AAL5 Common Part Convergence Sublayer - Service Data Unit 
(CPCS-SDU) encapsulation consists of the REQUIRED control word and 
the AAL5 CPCS-SDU. The ATM cell encapsulation consists of an 
OPTIONAL control word, a 4-byte ATM cell header, and the ATM cell 
payload. 
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5.2.1. ATM AAL5 CPCS-SDU Mode 


In ATM AAL5 mode, the ingress router is required to reassemble AAL5 
CPCS-SDUs from the incoming VC and transport each CPCS-SDU as a 
single packet. No AAL5 trailer is transported. The control word is 
REQUIRED; its use, however, is optional, although desirable. Use of 
the control word means that the ingress and egress LSRs follow the 
procedures below. If an ingress LSR chooses not to use the control 
word, it MUST set the flags in the control word to 0; if an egress 
LSR chooses to ignore the control word, it MUST set the ATM control 
bits to 0. 


The EFCI (Explicit Forward Congestion Indication) and CLP (Cell Loss 
Priority) bits are carried across the network in the control word. 
The edge routers that implement this document MAY, when either adding 
or removing the encapsulation described herein, change the EFCI bit 
from 0 to 1 in order to reflect congestion in the network that is 
known to the edge routers, and the CLP bit from 0 to 1 to reflect 
marking from edge policing of the ATM Sustained Cell Rate. The EFCI 
and CLP bits MUST NOT be changed from 1 to 0. 


The AAL5 CPCS-SDU is prepended by the following header: 


0 1 2 3 
00:23 4:59:00: 1:89:01 23d: 6€ 48 9-0 L2 32 090067118. 90.1 
tt ot A A A A O O nn ppt 
Rsvd |T|E|L|c| Length | Sequence Number 
tt ot ot nt ppt 
ATM AAL5 CPCS-SDU | 


-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 
* T (transport type) bit 


Bit (T) of the control word indicates whether the packet 
contains an ATM cell or an AAL5 CPCS-SDU. If set, the packet 
contains an ATM cell, encapsulated according to the ATM cell 
mode section below; otherwise, it contains an AAL5 CPCS-SDU. 
The ability to transport an ATM cell in the AAL5 mode is 
intended to provide a means of enabling Operations and 
Management (OAM) functionality over the AAL5 VC. 
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* E ( EFCI ) Bit 


The ingress router, Rl, SHOULD set this bit to 1 if the EFCI bit 
of the final cell of those that transported the AAL5 CPCS-SDU is 
set to 1, or if the EFCI bit of the single ATM cell to be 
transported in the packet is set to 1. Otherwise, this bit 
SHOULD be set to 0. The egress router, R2, SHOULD set the EFCI 
bit of all cells that transport the AAL5 CPCS-SDU to the value 
contained in this field. 


* L ( CLP ) Bit 


The ingress router, R1, SHOULD set this bit to 1 if the CLP bit 
of any of the ATM cells that transported the AAL5 CPCS-SDU is 
set to 1, or if the CLP bit of the single ATM cell to be 
transported in the packet is set to 1. Otherwise, this bit 
SHOULD be set to 0. The egress router, R2, SHOULD set the CLP 
bit of all cells that transport the AAL5 CPCS-SDU to the value 
contained in this field. 


* C ( Command / Response Field ) Bit 


When FRF.8.1 Frame Relay / ATM PVC Service Interworking 
[FRF.8.1] traffic is being transported, the CPCS-UU Least 
Significant Bit (LSB) of the AAL5 CPCS-SDU may contain the Frame 
Relay C/R bit. The ingress router, R1, SHOULD copy this bit to 
the C bit of the control word. The egress router, R2, SHOULD 
copy the C bit to the CPCS-UU Least Significant Bit (LSB) of the 
AAL5 CPCS PDU. 


5.2.2. ATM Cell Mode 


In this encapsulation mode, ATM cells are transported individually 
without a Segmentation and Reassembly (SAR) process. The ATM cell 
encapsulation consists of an OPTIONAL control word, and one or more 
ATM cells - each consisting of a 4-byte ATM cell header and the 48- 
byte ATM cell payload. This ATM cell header is defined in the FAST 
encapsulation [FAST] section 3.1.1, but without the trailer byte. 
The length of each frame, without the encapsulation headers, is a 
multiple of 52 bytes long. The maximum number of ATM cells that can 
be fitted in a frame, in this fashion, is limited only by the network 
MTU and by the ability of the egress router to process them. The 
ingress router MUST NOT send more cells than the egress router is 
willing to receive. The number of cells that the egress router is 
willing to receive may either be configured in the ingress router or 
may be signaled, for example, using the methods described in 
[RFC4906]. The number of cells encapsulated in a particular frame 
can be inferred by the frame length. The control word is OPTIONAL. 
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If the control word is used, then the flag bits in the control word 
are not used, and MUST be set to 0 when transmitting, and MUST be 
ignored upon receipt. 


The EFCI and CLP bits are carried across the network in the ATM cell 
header. The edge routers that implement this document MAY, when 
either adding or removing the encapsulation described herein, change 
the EFCI bit from 0 to 1 in order to reflect congestion in the 
network that is known to the edge router, and the CLP bit from 0 to 1 
to reflect marking from edge policing of the ATM Sustained Cell Rate. 
The EFCI and CLP bits SHOULD NOT be changed from 1 to 0. 


This diagram illustrates an encapsulation of two ATM cells: 


0 1 2 3 

QUT. 2 34 5 16 Sf 8079 0" 230 45 68 90 01. 2: 34-05. 6*7 BG 0rd. 

-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 
Control word ( Optional ) 

-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 

VPI | VCI PIL [él 

-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 

ATM Payload ( 48 bytes ) 


+—+—+ 


| | 
| 3 | 
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 
| VPI | VCI PTI |c] 
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 
| 
| 
| 
| 
+ 


+ 


+ 


ATM Payload ( 48 bytes ) | 
" | 
-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 
* VPI (Virtual Path Identifier) 
The ingress router MUST copy the VPI field from the incoming 
cell into this field. For particular emulated VCs, the egress 
router MAY generate a new VPI and ignore the VPI contained in 
this field. 
* VCI (Virtual Circuit Identifier) 
The ingress router MUST copy the VCI field from the incoming ATM 


cell header into this field. For particular emulated VCs, the 
egress router MAY generate a new VCI. 
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* PTI (Payload Type Identifier) & CLP ( C bit ) 


The PTI and CLP fields are the PTI and CLP fields of the 
incoming ATM cells. The cell headers of the cells within the 
packet are the ATM headers (without HEC) of the incoming cell. 


5.2.3. OAM Cell Support 


OAM cells MAY be transported on the VC LSP. An egress router that 
does not support transport of OAM cells MUST discard frames that 
contain an ATM cell with the high-order bit of the PTI field set to 
1. A router that supports transport of OAM cells MUST follow the 
procedures outlined in [FAST] section 8 for mode 0 only, in addition 
to the applicable procedures specified in [RFC4906]. 


5.2.4. CLP bit to Quality of Service Mapping 


The ingress router MAY consider the CLP bit when determining the 
value to be placed in the Quality of Service fields (e.g., the EXP 
fields of the MPLS label stack) of the encapsulating protocol. This 
gives the network visibility of the CLP bit. Note however that cells 
from the same VC MUST NOT be reordered. 


5.3. Ethernet VLAN 


For an Ethernet 802.1q VLAN, the entire Ethernet frame without the 
preamble or FCS is transported as a single packet. The control word 
is OPTIONAL. If the control word is used, then the flag bits in the 
control word are not used, and MUST be set to 0 when transmitting, 
and MUST be ignored upon receipt. The 4-byte VLAN tag is transported 
as is, and MAY be overwritten by the egress router. 


The ingress router MAY consider the user priority field [IEEE802.3ac] 
of the VLAN tag header when determining the value to be placed in the 
Quality of Service field of the encapsulating protocol (e.g., the EXP 
fields of the MPLS label stack). In a similar way, the egress router 
MAY consider the Quality of Service field of the encapsulating 
protocol when queuing the packet for egress. Ethernet packets 
containing hardware-level Cyclic Redundancy Check (CRC) errors, 
framing errors, or runt packets MUST be discarded on input. 


5.4. Ethernet 


For simple Ethernet port to port transport, the entire Ethernet frame 
without the preamble or FCS is transported as a single packet. The 
control word is OPTIONAL. If the control word is used, then the flag 
bits in the control word are not used, and MUST be set to 0 when 
transmitting, and MUST be ignored upon receipt. As in the Ethernet 


Martini, et al. Historic [Page 12] 


RFC 4905 Encapsulation for L2 Frames over MPLS June 2007 


VLAN case, Ethernet packets with hardware-level CRC errors, framing 
errors, and runt packets MUST be discarded on input. 


5.5. High-Level Data Link Control (HDLC) 


HDLC mode provides port to port transport of HDLC-encapsulated 
traffic. The HDLC PDU is transported in its entirety, including the 
HDLC address, control, and protocol fields, but excluding HDLC flags 
and the FCS. Bit/byte stuffing is undone. The control word is 
OPTIONAL. If the control word is used, then the flag bits in the 
control word are not used, and MUST be set to 0 when transmitting, 
and MUST be ignored upon receipt. 


The HDLC mode is suitable for port to port transport of Frame Relay 
User-Network Interface (UNI) or Network-Network Interface (NNI) 
traffic. It must be noted, however, that this mode is transparent to 
the FECN, BECN, and DE bits. 


5.6.. RPP 


PPP mode provides point to point transport of PPP-encapsulated 
traffic, as specified in [RFC1661]. The PPP PDU is transported in 
its entirety, including the protocol field (whether compressed using 
PFC or not), but excluding any media-specific framing information, 
such as HDLC address and control fields or FCS. Since media-specific 
framing is not carried, the following options will not operate 
correctly if the PPP peers attempt to negotiate them: 


- Frame Check Sequence (FCS) Alternatives 
- Address-and-Control-Field-Compression (ACFC) 
- Asynchronous-Control-Character-Map (ACCM) 


Note also that VC LSP Interface MTU negotiation as specified in 
[RFC4906] is not affected by PPP Maximum Receive Unit (MRU) 
advertisement. Thus, if a PPP peer sends a PDU with a length in 
excess of that negotiated for the VC LSP, that PDU will be discarded 
by the ingress router. 


The control word is OPTIONAL. If the control word is used, then the 
flag bits in the control word are not used, and MUST be set to 0 when 
transmitting, and MUST be ignored upon receipt. 


6. Using an MPLS Label as the Demultiplexer Field 
To use an MPLS label as the demultiplexer field, a 32-bit label stack 
entry [RFC3032] is simply prepended to the emulated VC encapsulation, 


and hence will appear as the bottom label of an MPLS label stack. 
This label may be called the "VC label". The particular emulated VC 
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identified by a particular label value must be agreed by the ingress 
and egress LSRs, either by signaling (e.g., via the methods of 
[RFC4906]) or by configuration. Other fields of the label stack 
entry are set as follows. 


6.1. MPLS Shim EXP Bit Values 


If it is desired to carry Quality of Service information, the Quality 
of Service information SHOULD be represented in the EXP field of the 

VC label. If more than one MPLS label is imposed by the ingress LSR, 
the EXP field of any labels higher in the stack SHOULD also carry the 
same value. 


6.2. MPLS Shim S Bit Value 


The ingress LSR, R1, MUST set the S bit of the VC label to a value of 
1 to denote that the VC label is at the bottom of the stack. 


6.3. MPLS Shim TTL Values 


The ingress LSR, R1, SHOULD set the TTL field of the VC label to a 
value of 2. 


7. Security Considerations 


This document specifies only encapsulations, and not the protocols, 
used to carry the encapsulated packets across the network. Each such 
protocol may have its own set of security issues, but those issues 
are not affected by the encapsulations specified herein. More 
detailed security considerations are also described in Section 8 of 


[RFC4447]. 
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